【摘要】 基于角色的访问控制模型(RBAC)难以直接有效地应用到以“最小需要”为原则的细粒度访问控制应用领域。为此,文章提出以数据为中心,基于RBAC的条件权限增强的最少需要访问控制模型(MNAC),给出了其形式化的描述以及面向方面的编程实现方法。最后将其应用到医学图像存档与传输系统(PACS)的访问控制中,证明该模型简单有效地实现了复杂多变的细粒度的访问控制。更多还原

【Abstract】 The basic model of RBAC can not be applied directly to the systems which require"minimum necessary" and fine-grained access control.In this paper,we propose a data-centric and conditional-permission enhanced RBAC model(MNAC).We present formal descriptions of the model,and give implementation of MNAC using aspect oriented programming.Finally,we apply the MNAC to access control of picture archiving and communication system(PACS),a large and complex distributed application system.The application proves that it is an effective model in dealing with complex,changing,and fine-grained access control.更多还原